> For the complete documentation index, see [llms.txt](https://docs.harmony.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.harmony.io/integrations/mdm/jumpcloud-mdm.md). # JumpCloud MDM JumpCloud's Mobile Device Management provides unified device management for Windows, macOS, Linux, iOS, and Android devices. Connecting JumpCloud MDM to Harmony enables automated device enrollment, intelligent policy enforcement, and cross-platform fleet management from a single platform. Harmony collects device data from JumpCloud automatically on a scheduled basis, so your device inventory stays up to date without any manual action. Data is processed through a unified pipeline, normalised into a consistent schema, and made available for visibility, analysis, and workflow automation across your fleet. #### What the JumpCloud MDM integration enables | Capability | Description | | ---------------------------- | -------------------------------------------------------------------------- | | Cross-Platform Management | Manage Windows, Mac, Linux, iOS, and Android devices | | Remote Commands | Execute remote lock, wipe, and restart commands | | Compliance Monitoring | Track device compliance and security status | | Device Filtering and Sorting | Filter, sort, and search your device inventory with multi-value conditions | | Workflow Builder Blocks | Use JumpCloud MDM data directly in automated support workflows | | Custom Script Deployment | Create and deploy scripts to macOS, Windows, and Linux devices | | Recovery Key Access | View and retrieve MDM recovery keys directly within Harmony | | Windows Device Discovery | Inventory Windows devices including USB and Bluetooth peripherals | | Automatic OS System Groups | Automatically create JumpCloud OS system groups from asset data | #### Prerequisites * **JumpCloud Admin Access**: Organization administrator role * **JumpCloud Subscription**: With MDM features enabled * **Harmony Account**: Active Harmony workspace #### Configuration **Step 1: Generate API Key in JumpCloud** 1. Log in to your **JumpCloud Admin Portal** 2. Navigate to **User Authentication** > **API Keys** 3. Click **Generate New API Key** 4. Copy the API key (you'll need this for Harmony) **Step 2: Navigate to Integrations** 1. Go to **Settings** > **Integrations** 2. Under **MDM**, select **JumpCloud (MDM)** ![JumpCloud MDM Integration](/files/gBJ8DjBY5vxNWDsGs15x) **Step 3: Enter API Credentials** 1. Enter your **Instance name** 2. Enter your **JumpCloud API key** 3. Click **Connect** ![JumpCloud MDM Configuration](/files/SBEBVrVRh8rubmX0HkfF) #### What Harmony Syncs **From JumpCloud:** * Device inventory across all platforms * Device compliance status * Installed applications * Policy assignments * Device health metrics * Enrollment status * Last restart time (calculated from System Insights uptime data, covering over 74% of devices with System Insights enabled) * Battery health status (reported using standardised values) #### Device Data and Inventory Harmony automatically syncs device data from JumpCloud on a scheduled basis. Data collection runs continuously in the background for every connected tenant, so your device inventory stays accurate without any manual triggering. **Windows Device Discovery** Harmony deploys PowerShell-based scripts through JumpCloud to inventory managed Windows machines, bringing Windows support in line with existing macOS coverage. In addition to core device inventory via osquery, Harmony also detects connected peripherals: * **USB devices**: Discovered using WMI-based enumeration, with automatic filtering of USB hubs and invalid entries, and device-type mapping for accurate asset classification * **Bluetooth devices**: Discovered via registry-based scanning, with standardised output for consistent representation across your fleet **Software Inventory** Harmony surfaces only business-relevant applications in the software inventory for JumpCloud-managed devices: * **Mac apps**: Only applications installed under `/Applications/` are shown; system apps, utilities, and uninstallers are automatically excluded * **Windows programs**: Only software installed in Program Files locations is included; system components and utilities are filtered out **Mac Model Names** Harmony displays clean, readable Mac model names for JumpCloud-managed devices. Instead of cryptic identifiers like `Mac16,7`, Harmony resolves these to human-readable names such as "MacBook Pro (16-inch, 2024)" using a comprehensive lookup covering all Mac product lines from 2008 through 2025 - including MacBook Pro, MacBook Air (including M1, M2, M3, and M4 models), MacBook, iMac, and more. Where Apple MDM marketing name data is available, a clean short format is used, such as "MacBook Air 15"" or "MacBook Pro 16"". **Automatic OS System Groups** When assets are synced with JumpCloud, Harmony can automatically create OS-based system groups in JumpCloud. This keeps your device groups consistent with your asset data and reduces manual setup in JumpCloud. #### Device List Filtering and Sorting You can filter and sort your managed devices list directly within Harmony's JumpCloud MDM integration. The device list supports: * **Sort devices** by name, status, or compliance status in ascending or descending order * **Filter devices** using multi-value conditions, so you can narrow results across multiple statuses or attributes at once * **Search** across devices with a simplified, unified query interface These capabilities make it easier to manage large device inventories and quickly identify the devices you need. #### MDM Recovery Keys Harmony fetches and stores recovery keys for your JumpCloud-managed devices automatically. Recovery keys are encrypted at rest and accessible directly within Harmony when you need them for device recovery or ticket resolution. * Recovery keys are synced per device from JumpCloud and stored encrypted in Harmony * A dedicated recovery key button and modal on the device view gives you quick access to each device's key * Keys are available during support and incident resolution workflows #### Custom Script Deployment You can create, manage, and deploy custom scripts to your JumpCloud-managed devices directly through Harmony. Scripts support full lifecycle tracking and can be scoped precisely to the devices that need them. * **Multi-OS targeting**: Deploy scripts to macOS, Windows, or Linux devices from a single interface * **Device filtering**: Include or exclude specific devices by device type, device ID, or other conditions to scope deployments precisely * **Script management**: Create, update, and delete scripts with full lifecycle tracking across your MDM integrations * **JumpCloud integration**: Full support for deploying, updating, and removing scripts via JumpCloud #### Workflow Builder JumpCloud has been split into two distinct categories in the workflow builder - **Identity Provider (IdP)** and **MDM** - so you can work with each capability independently and more clearly. You can connect to JumpCloud MDM directly within the workflow builder to power automated support workflows with device management data. The following MDM blocks are available for JumpCloud: | Block | Description | | ---------------- | ------------------------------------------------------------------------------------------------------------------------------ | | **Get Device** | Retrieve details for a specific device managed in JumpCloud MDM | | **List Devices** | Query and list devices across your JumpCloud MDM environment, with an option to include extended fields for richer device data | The **List Groups (IdP)** block is available under the JumpCloud Identity Provider category. #### Data Reliability and Multi-Integration Support Harmony's background data processing is optimised to reduce sync failures and keep your JumpCloud data consistently available. When managing multiple MDM integrations alongside JumpCloud, device and policy data is correctly scoped per integration so that records from one MDM source do not interfere with another. Stale or unsynced data is cleaned up after each sync cycle to keep your device inventory accurate. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.harmony.io/integrations/mdm/jumpcloud-mdm.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.